Home

pass-android

Android password manager app compatible with pass, the standard unix password manager.

Core Features

1. [Secure Copy & Paste](Secure Copy & Paste) - #2

   Control the Clipboard (i.e. clear after 45 seconds). Don't let unauthorized apps access the password you want to copy & paste.

2. [Browse passwords](Browse passwords) to copy or show

   Recursively browse the directories with passwords. Allow to copy or show.

3. Use GnuPG - #4

   Full compatibility with pass and the gnupg toolchain.

4. [Import & Update passwords](Import & Update passwords) - #5

   One-way push of passwords from computer to device.

5. [Secure Passphrase & Password Cache](Secure Passphrase & Password Cache)

   Don't leak anything. But don't make the mobile life too uncomfortable.

6. Configuration

   Preferences. Let the user decide. As much as possible.

7. Modern UI and [App Architecture](App Architecture)

   Pleasant to the eye. Easily extensible. Hackable.

Secondary Features

1. [Secure Password Storage](Secure Password Storage) - #1

   Encrypted container for passwords to hide even their file names.

2. [Built-in keyboard](Built-in keyboard) for passphrase entry - #3

   Don't let other apps snoop the passphrase. Be paranoid.

Feature Wishlist

Maybe one day support:

1. Searching for a password
2. Sharing of a password (TODO: analyse security impact)
3. Creation of passwords
4. Real 2-way sync (with conflict handling / merging)
5. Security tips, like "Did you know..." you can improve your ~/.gnupg/gpg.conf settings? i.e. improve hashing algorithms used, see bettercrypto.org
6. Improve security by including PRNG fixes. Some SecureRandom Thoughts.